ss-proj shirasagi vulnerabilities and exploits

(subscribe to this query)

NA

SHIRASAGI is a Content Management System. Prior to version 1.18.0, SHIRASAGI is vulnerable to a Post-Unicode normalization issue. This happens when a logical validation or a security check is performed before a Unicode normalization. The Unicode character equivalent of a characte...

Ss-proj Shirasagi

NA

Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated malicious user to execute an arbitrary script on the web browser of the user who is logging in to the product.

Ss-proj Shirasagi

NA

Stored cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated malicious user to execute an arbitrary script on the web browser of the user who is logging in to the product.

Ss-proj Shirasagi

NA

Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated malicious user to alter or create arbitrary files on the server, resulting in arbitrary code execution.

Ss-proj Shirasagi

NA

Stored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and previous versions versions allows a remote authenticated malicious user to inject an arbitrary script.

Ss-proj Shirasagi

NA

Stored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and previous versions versions allows a remote attacker with an administrative privilege to inject an arbitrary script.

Ss-proj Shirasagi

NA

Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated malicious user to redirect users to an arbitrary web site and conduct a phishing attack.

Ss-proj Shirasagi

NA

Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

Ss-proj Shirasagi

4.3

CVSSv2

Cross-site scripting vulnerability in SHIRASAGI v1.0.0 to v1.14.2, and v1.15.0 allows a remote malicious user to inject an arbitrary script via unspecified vectors.

Ss-proj Shirasagi 1.15.0 Ss-proj Shirasagi

5.8

CVSSv2

Open redirect vulnerability in SHIRASAGI v1.13.1 and previous versions allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Ss-proj Shirasagi

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook